Hi All, I want to know Palo alto passive link shutdown mode drawaback and auto mode advantage. Is the any issue to confiigure passive link in shutdown mode
The PA showed one of the pc's on my network was the source of brute force attack to the Netherlands so I blocked it. Anyone have any ideas what needs to be done to remediate the issues on the PC?
Hi All Experts, I am currently having an issue while attempting to extend a Master Key validity time: 2017-07-21 00:08:20.473 +0100 ------------ Received event:3 (Cfg installed) in worker thread ------------2017-07-21 00:08:20.475 +0100 [3] Reading mkey, ks files...2017-07-21 00:08:20.475 +0100 [3] Get fips/cc mode, event_type2017-07-21 00:08:2...
I installed Minemeld and found the office365-config.yml file to import in order to build my External Dynamic Lists. Unfortunately, we are not using the commercial tenant for O365, so I'm wondering if anybody knows of a different file that you can download to mine the necessarry URLs to get the IPs that are used for that tenant instead? Maybe it'...
Hello, I'm trying to install Minemeld on Ubuntu 16.04. https://github.com/PaloAltoNetworks/minemeld-ansible $ ansible-playbook -K -i 127.0.0.1, local.yml I receive the following fatal error during the npm install: TASK [minemeld : npm install] ************************************************** fatal: [127.0.0.1]: FAILED! => {"change...
I experienced an issue when using the UI in 7.1.11 on a PAN 5060 I disabled "Preemptive" in the "Elections Settings" area of the "Device -> High Availability -> General" page in 7.1.10. It has a template from Panorama, so the change is saved as an override. I upgraded to 7.1.11. When I tried to enable "Preemptive", by reverting the overrid...
HiFrom command "show system statistics session" , we can see real-time throughput value.Is there a way to know or collect those value ?, we want to see the maximum/peak throughput been using on palo.From what i think. (not sure if we can do these method?)1. Is there a way to using API to collect throughput value , then we can plot them on excel...
Hi, We are having problems with Oracle sessions because a offloading sessions. we have solved this problem rising timeout for this app. I would like to know if we create a custom app, this offload process is still working over this custom app? https://live.paloaltonetworks.com/t5/Management-Articles/How-Does-the-Device-Manage-Offloaded-Session/t...
I'm looking at picking up a 2 device 1 unit 19" rack mount for my HA PA-220s off of Amazon. I want to make sure this won't affect my support since it's not an official Palo Alto tray. Am I ok with this? Thanks!
Community member @KyleVonFange came up to the booth and asked an interesting question he got this morning. We're posting it in the discussion forum and the right answer gets a chance at winning a Live Community hoodie! What is the best way to set up a steelhead behind a virtual firewall so that only a couple internal IPs (both directions) ar...
Hello, Does anyone know if it is possible to have Palo Alto authenticate with Google? We are using LDAP and Google. The problem I have is that when a student signs in on a Chromebook, we can only get reports for the IP address. I would like to be able to trace events back to students without having to do a lot of work. Thank you.
Office 365 uses so many URL's, is there any way I can exclude it as an application?
Folks. I have a pair of 3050's in a HA cluster, and recently I'ver been noticing some weird messages ont he system log on the primary. I happened to log into the secondary the other day, and say a heap more. has anyone seen messages like the following Failed to upload the new HA URL file to RAM.Failed to upload the old URL file to RAM,Starting w...
I'm trying to get rid of the warning when I open the PA GUI from Chrome. I'm getting the following warning:This server could not prove that it is 192.168.10.4; its security certificate is from [missing_subjectAltName]First of all, IE is fine, no errors! I have generated the certificate and imported it as my trusted Root CA:I have also created a ...
Hi I have OSPF setup on an interface and a policy that allows OSPF from any to any . But I see a lot of aged-out / unknown log entries and some are with 0 bytes is this normal .. OSPF seems to be stable, but it very strange ..
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
TomYoung
on:
FWs no longer forwarding logs to Panorama
